Privacy Policy

Sarojah Technologies Limited is the data controller responsible for your personal data in connection with this Site. We are a company registered in Ireland (Company No. 824028). You can reach us about privacy matters at info.sarojah@gmail.com.

We collect only what we need to respond to you and provide our services:

• Information you give us— when you submit a demo request, contact form, or enquiry: your name, business email, phone number, the service you’re interested in, and any message or details you choose to include.
• Conversation data — if you interact with our website chat or messaging assistant, the content of that conversation.
• Technical data — limited information such as your IP address and basic device/browser information, and cookies (see our Cookie Policy).

We do not intentionally collect special categories of data (such as health or financial details) through the Site. Please do not include sensitive personal information in free-text fields.

We process your personal data for the following purposes and legal bases:

• To respond to your enquiry and provide our services — legal basis: taking steps at your request prior to entering a contract, and our legitimate interest in responding to prospective and existing customers.
• To send you a confirmation and follow up — legal basis: legitimate interest / pre-contract steps.
• To operate, secure, and improve the Site (including fraud/abuse prevention) — legal basis: legitimate interest.
• Analytics and non-essential cookies — legal basis: your consent, which you can withdraw at any time.

We do not sell your personal data. We share it only with trusted service providers (“processors”) who help us run the Site and our services, under appropriate contractual safeguards. These may include providers for:

• Hosting and database storage of enquiries;
• Email delivery (for notifications and your acknowledgement email);
• AI language processing used to power our assistant features;
• Messaging and scheduling (for example WhatsApp/Meta and booking tools), where relevant;
• Payment processing, where you make a payment;
• Security and bot-protection services.

Some providers may process data outside the European Economic Area (EEA). Where they do, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

Some of our features connect to a business’s own Google account to sync bookings to their Google Calendar and to send booking confirmation emails from their own Gmail address. We request only the two Google API scopes needed for those specific features (Calendar and Gmail send) — nothing broader.

Data accessed through these Google API scopes is used solely to: (1) create and read calendar events for appointment scheduling, and (2) send a booking confirmation email from the connected account. It is never used for any other purpose.

Limited Use compliance statement: The use of any data received through Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use, transfer, or sell this data — whether raw, aggregated, or derived — to develop, improve, or train any general-purpose or specialised artificial intelligence or machine learning models.

Our conversational assistant features are powered by a third-party AI provider (accessed directly via its API, not through an aggregator or gateway), used only to interpret and respond to customer messages. That AI provider is never given, and never processes, any data obtained through Google Workspace APIs — calendar and email content accessed under these scopes stays confined to the direct booking/confirmation actions described above.

We may occasionally receive requests from public authorities (such as law enforcement or regulators) for personal data. When we do, we handle them responsibly:

• We review the legality of each request before responding, to confirm it is valid and made under proper legal authority.
• We disclose only the minimum data necessary to comply with a lawful request, and never more than is strictly required.
• We document these requests — including the request, our response, and the legal reasoning and people involved.
• We challenge requests we consider unlawful, overbroad, or improper, and will push back or seek to narrow them where appropriate.

Where permitted by law, we will notify an affected customer before disclosing their data in response to such a request.

We keep personal data only for as long as necessary for the purposes described above — for example, to handle your enquiry, maintain our business records, and comply with legal obligations. When it is no longer needed, we delete or anonymise it.

Under the GDPR, you have the right to:

• Access the personal data we hold about you;
• Ask us to correct inaccurate or incomplete data;
• Ask us to erase your data (“right to be forgotten”), where applicable;
• Restrict or object to certain processing;
• Request a copy of your data in a portable format;
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at info.sarojah@gmail.com. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, but we work to safeguard your information and continually improve our practices.

We use cookies and similar technologies as described in our Cookie Policy.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes will be highlighted on the Site where appropriate.

For any questions about this Privacy Policy or your personal data, contact us via our contact page or by email at info.sarojah@gmail.com.

Sarojah Technologies Limited · Registered in Ireland · Company No. 824028